Today, most security professionals are actively architecting and implementing cloud security controls across SaaS, PaaS, and IaaS environments. We’ve learned that what once worked on-premises may not work quite the same in the cloud, and a wide range of new and innovative security platforms and services have emerged and evolved in recent years to address critical cloud security use cases and categories, including: Cloud security monitori...

Is it really over when you are hacked? Or is it only over when our adversary has secured their impact and actions on objective? Perimeters are bound to be broken, but our game-over" scenarios should still be defended. We need to not only protect our inside, but carefully define what exactly are we defending? What has the highest impact on our organization, and from there on carefully architect our defenses to ensure we can always survive, even...

The idea of DevOps, the term the industry had initially decided on for the work between the Application and Operations teams, was coined 15 years ago. To give perspective, the iPhone 3GS came out that year. If we think of what we had to work with in 2009, we now know in hindsight that we have better options, solutions, software, and patterns. We have an iPhone 15; we no longer have BlackBerry OS or Nokia. Windows 8.1? I hope not. Here are a fe...

In its fifth year, SANS Cyber Solutions Fest aims to brings together an ensemble of security professionals, solution providers, gurus and experts ready to share knowledge about the latest developments and innovative technologies in the cybersecurity industry. Join the attack surface & vulnerability management track to hear from chairperson Matt Bromiley and a host of leading cyber security experts as they walk through specific use cases an...

Keep Hacking Weird in Austin for Hands-On Cyber Security Training SANS Pen Test Austin 2024 is the premier offensive security training event of the year, featuring six days of in-depth, hands-on pen testing, red teaming, purple teaming, and exploit training for professionals who need to know how to find vulnerabilities within their organizations, understand risk, and prioritize resources based on potential real-world attacks. Come for the hack...

This year, we’re adding another day to MDEX! This event brings together representatives from TACOM (Tank Automotive Command) and the Detroit Arsenal, along with other key players in the defense industry. We are bringing back the APBI (Advanced Planning Briefing for Industry) and have coordinated with AUSA for their Annual Breakfast. MDEX offers a unique opportunity for attendees to interact with decision-makers and experts from various o...

Hands-On Cyber Security Training in Baltimore Celebrating 35 Years of Cybersecurity Excellence Elevate your expertise with cyber security training at SANS Baltimore Spring 2024 (April 28-May 3 ET). Led by industry-leading instructors renowned for their deep knowledge and practical insights, this event offers unparalleled, live access to your favorite cyber experts. Filled with hands-on labs, simulations, and exercises designed to equip you wit...

In the field of cybersecurity, we are failing to acknowledge that we have a big problem. Our job titles and job descriptions have the word security in it even though security isn’t our job. I have never met a security professional who claims that their organization will never be breached. Yet, we call ourselves security? When a breach does occur, it reflects poorly on us. Did it mean we did our jobs poorly that day? Let’s have the...

Welcome to the USAF Agile Combat Support, Modernization Summit ’24, SE / Vehicles / ATS, taking place from April 30th to May 2nd, 2024. As we stand at the forefront of an era defined by great power competition, this summit embodies our collective resolve to ensure that our armed forces remain unmatched in their power projection capabilities. It is here, at the nexus of technology and strategy, that we unite – military personnel, en...

Please Note: This event is closed to the press. This bi-annual conference, presented in partnership with the Aerospace Industries Association (AIA), serves as the forum for executive-level security leadership and policy-makers across the federal agencies and U.S. Industry to convene to address major government security topics. Don't miss this opportunity for candid discussion, high-level networking, and updates on important subjects. Themes an...